First published: Wed Dec 06 2006(Updated: )
** DISPUTED ** Symantec LiveState 7.1 Agent for Windows allows local users to gain privileges by stopping the shstart.exe process and open "Web Self-Service" from the system tray icon, which will open a browser window running with elevated privileges. NOTE: several third-party researchers have noted that administrator privileges may be necessary to terminate shstart.exe. If this is the case, then no privilege escalation occurs, and this is not a vulnerability.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Symantec LiveState Agent for Windows | =7.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2006-6308 is considered a privilege escalation vulnerability.
To fix CVE-2006-6308, ensure that you upgrade to the latest version of Symantec LiveState Agent for Windows.
CVE-2006-6308 affects local users of Symantec LiveState Agent for Windows version 7.1.
CVE-2006-6308 can allow local users to gain elevated privileges on the affected system.
Yes, CVE-2006-6308 poses a serious threat as it can lead to unauthorized access and control over the affected Windows environment.